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Abstract 

This paper studies an untrusted relay channel, in which the destination sends artificial noise simul¬ 
taneously with the source sending a message to the relay, in order to protect the source’s confidential 
message. The traditional amplify-and-forward (AF) scheme shows poor performance in this situation 
because of the interference power dilemma: providing better security by using stronger artificial noise 
will decrease the confidential message power from the relay to the destination. To solve this problem, a 
modulo-and-forward (MF) operation at the relay with nested lattice encoding at the source is proposed. 
For this system with full channel state information at the transmitter (CSIT), theoretical analysis shows 
that the proposed MF scheme approaches the secrecy capacity within 1/2 bit for any channel realization, 
and hence achieves full generalized security degrees of freedom (G-SDoF). In contrast, the AF scheme 
can only achieve a small fraction of the G-SDoF. For this system without any CSIT, the total outage 
event, defined as either connection outage or secrecy outage, is introduced. Based on this total outage 
definition, analysis shows that the proposed MF scheme achieves the full generalized secure diversity 
gain (G-SDG) of order one. On the other hand, the AF scheme can only achieve a G-SDG of 1/2 at 
most. 
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I. Introduction 

The broadcast nature of wireless transmission creates significant security concerns, and phys¬ 
ical layer techniques can be used in part to address these concerns. The theoretical basis for 
physical-layer security can be traced back to Shannon’s work on perfect secrecy [[ll, and to 
subsequent work by Wyner [|2l, Leung et al. [|3l|, and others on the wire-tap channel. The basic 
idea of physical-layer security is to exploit the destination’s advantages (e.g, better channel 
quality) over the eavesdropper. More recent works have investigated this problem in fading 
channels, including analyses of the fading secrecy capacity flU, [|5l and the secrecy outage 
probability O, dll. On the other hand, new coding and modulation schemes have been proposed 
to achieve physical-layer security, including Low Density Parity Check (LDPC) codes in [[8l and 
ll9l , nested lattice codes in ifTOl and [fTTll . and nested polar codes in [IT^ and iflBll . 

In recent years, several extended models of the wire-tap channel have been studied and one 
of these is the untrusted relay channel. In the untrusted relay channel, the source relies on a 
relay node to forward information to the destination, while keeping the transmitted information 
confidential from the relay. An example is the two-way untrusted relay channel with two-phase 
physical-layer network coding lfT4ll . in which the superimposed signals at the relay protect each 
other’s information with minimal rate loss compared to capacity ifTSll . [[HI. Similar ideas have 
been applied in the one-way untrusted relay channel in which the destination artificially transmits 
some interference to the relay while the source is transmitting. Depending on the processing at 
the relay, such schemes can be classified into two categories. The first category is amplify-and- 
forward (AF), in which the relay simply amplifies the received signal under its power constraint 
and then forwards it to the destination [[T7[l - [[T9ll . Although AF is simple to implement, its 
performance is severely limited by the interference power dilemma: more power of the relay 
is wasted on forwarding the interfering signal (which is useless to the destination) when the 
destination transmits with larger power to protect the confidential message; alternatively the 
confidential message is less well protected when the destination transmits with smaller power. 
The other category is decode-and-forward (DF) |[20[| . in which both source signal and interference 
signal are encoded by lattice codes and arrive at the relay in perfect synchronjQ, followed by 
channel decoding to obtain the noiseless network code produced by this signal. The DF scheme 

'Perfect synchronization here refers to the synchronization of signal amplitude, carrier frequency and carrier phase. 
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performs better than the AF seheme in the high SNR region but performs worse in the low SNR 
region, despite the eost of perfeet synehronization. Sehemes extending these ideas to multiple 
ehannels and fading ehannels ean be found in many works, such as ETl and t22\ . 

To counter the shortcomings of these existing techniques and inspired by the modulo-lattice 
additive noise (MLAN) channel lf2^ in which modulo processing at the receiver loses very 
little information, here we propose a novel modulo-and-forward (MF) scheme at the relay. In 
this scheme, the confidential message from the source node is encoded with a nested lattice 
code ifTOll while the artificial interference message from the destination is Gaussian. When the 
two messages arrive at the relay node simultaneously, the relay maps the superimposed signal 
to a new signal with a modulo operation according to the source lattice. As a result, the total 
power of the new message is reduced to that of the source lattice, with almost no loss of useful 
information. In this way, the proposed MF scheme solves the interference power dilemma of the 
AF scheme by relaying a signal with only the source power, without relation to the interference 
power. Moreover, MF does not require perfect synchronization as in the DF scheme. 

We analyze the secure performance of this MF scheme for two different cases. For Gaussian 
channels with full channel state information at the transmitter (CSIT), our analysis shows that the 
MF scheme approaches the secrecy capacity of the untrusted relay channel within 1/2 bit for all 
channel realizations; hence it achieves the full generalized secure degrees of freedom (G-SDoF), 
while the AF scheme can achieve only a small fraction of the G-SDoF. The achievable secrecy 
rate of MF is also better than that of DF, which as noted above requires fine synchronization. 

For fading channels without any CSIT, we characterize the total outage probability, which 
includes the connection outage probability at the destination and the secrecy outage probability 
at the relay node [171|. Beyond achieving a smaller outage probability as expected, the MF scheme 
achieves essential improvement over the AF scheme. Defining the generalized secure diversity 
as the rate with which the total outage probability goes to zero in the high SNR region, our 
analysis shows that the MF scheme achieves full diversity gain of 1 as long as the ratio of the 
destination signal power to the source signal power goes to infinity. The AF scheme, however, 
can only achieve a diversity gain of 1/2 at most, due to the interference power dilemma. 

The contributions of this paper are as follows. 

1) The MF Scheme: We propose the lattice code based modulo-and-forward scheme for the 
untrusted relay channel. This scheme is of practical interest since it only needs symbol level 
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Fig. 1. System model for the untrusted relay channel based on lattice coding. 

time synchronization and low complexity processing to obtain much better performance 
than other schemes. 

2) Analysis of the Secure Capacity and G-SDoF in Gaussian Channels: In Gaussian 
channels with full CSIT, we prove that the MF scheme approaches the secrecy capacity 
within one-half bit for any channel realization. Hence, the MF scheme achieves the full 
G-SDoF, while the AF scheme only achieves a very small fraction of the G-SDoF. 

3) Analysis of the Secure Diversity in Fading Channels: In fading channels without CSIT, 
the MF scheme achieves the full generalized secure diversity gain (G-SDG) value of 1, 
while the AF scheme only achieves a G-SDG of 1/2 due to the interference power dilemma. 

The remainder of this paper is organized as follows. Section II presents the detailed untrusted 
relay model and the notation used therein. For the proposed modulo-and-forward scheme. Section 
III elaborates the encoding process at the source node, the forwarding process at the relay node 
and the decoding process at the destination node. Under the assumption of full CSIT, Section IV 
analyzes the achievable rate and the G-SDoF of the MF scheme, with a comparison to the AF 
and DF schemes. Under the assumption of no CSIT, Section V analyzes the connection outage 
and secrecy outage probabilities, as well as the system secure diversity gain. Finally, Section VI 
concludes the paper. 
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II. System Model 

Fig. [H shows the system model for the considered untrusted relay channel, where the source 
S needs to transmit a confidential message to the destination D with R working as a relay. All 
nodes are equipped with single antennas, and operate in a time-division half-duplex mode. In 
this setting, although the source relies on the relay to forward the message, it does not trust the 
relay and would like to keep the confidential information secret from the relay. This model can 
find application in many practical scenarios such as renting a satellite from a third party to relay 
confidential messages. 

To prevent eavesdropping at R, an artificial interference scheme is proposed. Specifically, 
the destination D sends a signal to interfere with reception at the relay, while the source is 
transmitting to the relay. Then, the relay sends the corrupted source signal to the destination, 
where it can be recovered since the destination has full information about the interfering signal. 
This two phase transmission is similar to physical layer network coding as described in [[T4ll . 
The data transmission process is detailed as follows. 

Before transmitting the signal, the source needs to encode its information with a secure 
encoding scheme, such as those described in |13, ifTOll and ifT^ . Essentially, all the schemes 
can be described as follows. First, the length-Li binary confidential message v is combined with 
a random sequence and mapped to a new binary source message w of length L 2 > Li. This is 
a one-to-one mapping, the rule for which is known to all nodes, although the random sequence 
itself is not known to either R or D. The sequence w is then channel encoded to a length- 
message Xg to combat the channel degradation at the destination. 

After secure encoding at the source, the data transmission will operate in two phases as shown 
in Fig. [U Specifically, the first phase is a multiple access transmission, in which the source S 
transmits Xg with power Pg to the relay, and at the same time, D transmits a Gaussian interference 
signal Xd with power Pd. Hence the relay receives a superimposed signal 

yr = hiXg + h2Xd + Ur, (1) 

where hi ~ CAf{0, Si) denotes the instantaneous channel coefficient of the Ath hop (i = 1, 2) in 
the multiple access phase, and tir ~ CAA(0, is additive white Gaussian noise at the relay. 

Recall that the relay is untrusted, and we hope to keep the confidential information secret 
from the relay. Therefore, the relay must not be able to correctly decode w from y^. On the 
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other hand, the relay is willing to forward the message to the destination. So it will proeess i/r 
to make the transmission to D more effieient. We denote the message sent from the relay by 
Xr, with the same average power eonstraint pj^. 

The seeond phase is a point-to-point forwarding transmission, where R transmits Xr to the 
destination D. As a result, the reeeived signal at D can be expressed as 


Vd h2Xr -f n,i, 


( 2 ) 


where ~ CAA(0, is additive white Gaussian noise at the destination and the eorresponding 
ehannel eoeffieient is also /i 2 under the assumption of reeiproeity. 

Let gi = be the instantaneous ehannel gain of the Lth hop (i E {1, 2}). For an amplify- 
and-forward relay seheme, Xr = Tt/r with the normalizing eoeffieient r = 

Although the artifieial interferenee Xd proteets the eonfidential message from eavesdropping 
at R, it also degrades the performanee of the useful information at the destination sinee it 
deereases the normalizing eoeffieient r via the term Pd therein. Better proteetion with larger Pd 
also eonsumes more power at the relay, whieh is the interferenee power dilemma, as noted above. 
To solve this dilemma, i.e., to overeome the detrimental effeets of the artifieial interferenee and 
keep its benefieial effeets at the same time, we now propose a modulo-and-forward seheme as 
detailed in the next seetion. 


III. Modulo-and-Forward Scheme 

In the amplify-and-forward seheme, a good part of the relay’s power is used to eonvey the 
interferenee, whieh is totally useless for the destination D. To eounter this problem, we propose 
a modulo-and-forward scheme, in which the relay processes yr with a modulo operation before 
forwarding it. This scheme is detailed as follows. 


A. Lattice Encoding at S 

We consider the nested lattice coding scheme of ifTOll . Let (A, Ao,Ai) be properly designed 
nested lattices such that Ai C Aq C A, and their associated fundamental Voronoi regions are 
denoted by Vi, Vo, and V, respectively. The Voronoi regions are selected such that the average 

^ There is no loss of generality with this assumption since the transmit power can be combined into the channel coefficient 


in the second phase. 
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power of points in Vi is Pg. All points in (A,Ao,Ai) are length-L veetors. We define the 
eodebook C = {A fi Vo} and there is a one-to-one mapping between eaeh eodeword in C and 
eaeh confidential message v. Therefore, the cardinality of C is |C| = We then define another 
eodebook C' = {Aofi Vi} and the cardinality of this eodebook is \C'\ = Therefore, there 

is a one-to-one mapping between any codeword in C and any length-(L 2 — Li) binary sequence. 

For any message v, the source selects the corresponding codeword Cm in C, and then it 
generates a random bit sequence of length L 2 — Li, which is mapped to one codeword bm in C. 
Before transmission, the source S calculates the nested lattice codeword as Xg = (cm + bm + u) 
mod Ai, equal to {am + u) mod Ai, where m is a dither vector uniformly distributed over 
Vi and am = {cm + bm) mod Ai. Obviously, the average power of Xg is still Pg. 

B. Modulo Operation at R 

After the first phase transmission, the relay R receives Pr = hiXg + h 2 Xd + Instead of 
forwarding pr directly as in the AF scheme, the relay scales the received signal^ and reduces it 
modulo Ai, i.e., 

Xr = [jd-j—Ur + ui] mod Ai 

hi 

= [(5{xg P h 2 /hiXd + Ur/hi) -f Ml] mod Ai, (3) 

where ui is a random dither vector uniformly distributed over Vi and is known by all the nodes, 
and [3 is chosen as p +^ 2 /^^ to minimize interference at the destination as explained later. 

According to the lemma in lf23]l . Xr is also uniformly distributed over Vi and its average 
power is Pg. As it is assumed that the relay has the same transmit power constraint as Pg, it can 
directly forward the resulting signal Xr to the destination D. 

C. Lattice Decoding at D 

After receiving the signal pd of dH), the destination D exploits inflated lattice decoding [|23]|. 
Specifically, D multiplies the received signal by a coefficient a, and then cancels both the 


^With equalization at the relay, our modulo-and-forward scheme can be applied to both the in-phase and quadrature phase 
signals. For simplicity, we focus only on the in-phase signal processing here. 



self-interference Xd and the dither vector u^ui as 


(a ^ti 2 \ , . 

y = [j^yd - -u-Uij mod Ai, 


(4) 


where a and (3 are scaling factors to be selected to minimize the power of the residual interference 
plus noise. By substituting (2) and (3) into (4) and applying processing similar to that in 
and Il24ll . we can write y as 


y = (a{xr + -7^) — 13-^Xd — u — mod Ai 
V 122 hi / 

= (xr 4- (a — l)xr + — (3-^Xd — u — mod Ai 

(3xs + (3-^ + {a — \)xr + a- - u ) mod Ai 

hi /12 ' 

= (xs + {(3 — l)xs -f (3-3- -f (a — l)xr + a-r^ — u) mod A 

\ hi /I 2 ^ 

/ Tl Tlrl\ 

= (Om + (a — 1 ) 3 ;^ + {(3 — l)xs 4- (3-^ 4- a— j mod Ai, 

where the residual interference plus noise becomes ((a — I)xr + {I3 — I)xs+I3^ + a^), with an 
upper bound on the variance of (1 — a)‘^Ps 4- (1 — f3)^Ps 4- cPcP/y 2 4- lg\. We then select a 

and (3 to minimize this upper bound on the variancqj. It is easy to see that the optimal values of 
the scaling factors are a = p and f3 = -p-^Yr^. As a result, the equivalent noise variance 


(5) 


p.+<72/92 

of the post-modulo signal at D becomes 


CTg = min Ps, 


Ps+(T^/gi‘ 

Pm^ 


+ 




giPs -f 0-2 g2Ps + 0-2 
and we ignore the case of a‘1 = Ps hereafter for simplicity. 

Then, the decoder at the destination can use Euclidean lattice decoding to decode as 


( 6 ) 


am = Qviy) mod Ai, 


(7) 


where Qv{x) is the nearest neighbor quantizer defined as Qv{x) = argmin^gA ||a: — a\\. am 
can then be mapped to an estimate of w directly (note that w includes both information of 
confidential message v and the random generated information.). 

As proved in lf23]l . the error probability Pr(am 7 ^ am) goes to zero as long as the total 
transmission rate Rd = L2/L is less than the direct channel capacity Cd = \ \og{Ps/( jI). We 


‘^Xr, Xa and are independent of each other with the random dither vector u and ui as in [231. 








use Cr = ^log(l + giPs/{g 2 Pd + cr^)) to denote the channel capacity for the untrusted relay 
(with interference). As proved in ifTOll . this nested scheme can guarantee that the untrusted relay 
obtains no information about the confidential message as long as the confidential rate Rg = L^jL 
is less than the secrecy capacity [Cd — Cr\^, where [a;]+ = max(0,x). 
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By decreasing the power of the effective signal Ur/hi from PgR^Pd+^io Pg, the MF scheme 
can substantially improve the performance of the untrusted relay channel. The performance of 
MF is analyzed in the next two sections. 

IV. Secrecy Capacity Analysis with Full CSIT 

In this section, we analyze the capacity performance on the untrusted relay channel, in terms 
of the secrecy capacity and the generalized secure degrees of freedom, under the assumption of 
full CSIT. This section consists of four parts: Part A presents the definition of secrecy rate and 
generalized secure degrees of freedom; Part B presents upper bounds for the secrecy rate and 
G-SDoF for any forwarding protocol; Part C calculates the achievable secrecy rate and G-SDoF 
of the MF scheme; and finally Part D provides a comparison with the AF and DF forwarding 
schemes. 

A. Secrecy Rate and G-SDoF 

When the channel varies slowly and the channel information can be fed back to the transmitter, 
all the channel information can be pre-known by the transmitter. In this case, the transmitter can 
carefully select the confidential message rate Rg and the mixed message rate Rd respectively, 
such that the confidential message is correctly and securely transmitted to the destination at the 
maximal rate. In this case, the achievable secrecy capacity region has been derived in |l2l and 
is given by 

Rs ^ Rd ^ Cd 0 < < [Cd — C'r]’’’, (8) 

where Cd and Cr are the channel capacities from the source to the destination (via the relay) and 
the channel capacity from source to the relay, respectively. In this case, therefore, the secrecy 
capacity is the most important factor indicating the system performance. 

In the high SNR region, degrees of freedom is a good metric to analyze the system rate 
performance. Analogous to the generalized degrees of freedom definition in iflSll . we further 
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define the generalized secure degrees of freedom as 

^ r Rs{SNR,p) 

SD{p) = hmsup ’ 

SNR-^oo \og{SNR) 


(9) 


where SNR is defined as Ps/cr'^ and p = log(/iVi?)/ \og{SNR), with INR = Pd/cr"^ being the 


interference-to-noise ratio. 


B. Upper Bound on Secrecy Rate and G-SDoF 


We firstly present an upper bound on the secrecy rate for any possible forwarding protocol 
and processing at the relay node. As proved in |l2l and the secrecy rate for a wiretap 
channel is upper bounded by [Cd — Cr\^. In our system, the destination channel capacity Cd is 
upper bounded by the minimum capacity of the two-hop channel based on the cut-set bound, 
which is Cd < |log(l -f mm{gi, g 2 }^). On the other hand, the capacity of the relay channel, 
Cr = |log(l -f is achievable with properly selected lattices. As a result, an upper 

bound on the secrecy rate for this two-hop channel is given by 


U = 


^log ( 1 + m.m{gi,g2]^ 


1 , , 9iPs . 

-log(l+ p ^ 2 - 

2 g2Pd + O' 


( 10 ) 


We secondly present an upper bound for the G-SDoF. Substituting the upper bound in (fT^ 
to the definition in dH), we can easily obtain an upper bound on the G-SDoF as 

i log(l + min{^i, g 2 }^) - ^ log(l + gfpf+, 2 ) 


SDu{p) = limsup 

SNR^oo 


= - lim sup 

2 SNR-^00 


= - lim sup 

2 SNR-^00 


\og{SNR) 

log (^^Ari?min(^i,^ 2 )) - log (l + 
\og{SNR) 
log (1 + f^SNR^-P^ 


1 - 


log(^A^i?) 


{ p/2, If 0 < p < 1 

1/2, Ifl<p 


( 11 ) 


The G-SDoF must be no more than the generalized degrees of freedom without a security 
constraint, which is at most 1/2 in our two-hop single antenna system due to the two-phase 
transmission. And this best secure DoF may be achieved when the transmission power of the 
destination is no less than that of the source, as shown in (fTTI) . 
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C. Achievable Secrecy Rate and G-SDoF with MF 

We now calculate the achievable secrecy rate and G-SDoF for the modulo-and-forward scheme. 
1) Achievable Secrecy Rate: With reference to db]), a good nested lattice code can achieve the 
following rate to the destination: 

1 . 


= 2 log 


= i|og 


>2 log 


^ I ^ 

giPs+a-'^ g^Ps+u'^ 

1 Ps 9192 

2 cr2 5fi + g2 


( 12 ) 


From dU), we can compute the maximum information obtained by the relay. With the as¬ 
sumption that the relay knows all the nested lattice codebook information and the channel state 
information to detect the combined information w, the maximal information rate is 

1 - /- Ps9i 


Rr = 


log (l + 


2 ° Pd92 + 

Then, the achievable secrecy rate of the proposed modulo-and-forward scheme is given by 


(13) 


R. > 


, Ps 9 i92 

log ( T + ~ I 

2 9i A 92 


log (^1 + 


Ps9i 


Pd92 + 0-^ 


(14) 


From (fT4l) . we can see that the artificial noise power Pd only helps to improve the secrecy rate 
with almost no detrimental effect on the transmission from S' to D in our modulo-and-forward 
scheme. When Pd goes to infinity, Rg can approach the upper bound of | log ^1/2 -f ^ ) ■ 

Therefore, the MF scheme solves the interference power dilemma of the AF scheme. 

We now calculate the gap between the upper bound and the achievable rate in the non-trivial 
regime, i.e., U > 0 and Rg > 0. Without loss of generality, we assume that gi < g 2 . Then, we 
obtain the gap as 


U 


S^ + S^- + HP.y 


r) < 1/2. 


(15) 


- ^ gi+ g 2 + ‘ 2 gig 2 Ps/(T'^- 

which goes to zero as gi/g 2 goes to zero in the high SNR region. In other words, when the 
ratio between the two-hop channel gains, gi and g 2 , becomes very large or small, the achievable 
rate of the modulo-and-forward scheme approaches the upper bound for small noise variance. 
In summary, we have the following theorem. 
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Theorem 1: The modulo-and-forward scheme achieves a secrecy rate Rg of (fT4l) . which is 
within one-half bit of the secrecy capacity for all channel realization 

2} Achievable G-SDoF: Now we characterize the G-SDoF of the MF scheme. Substituting 
(fT4l) into the definition of G-SDoF in (|9l), we have 

pog(l/2+|i^)-llog(l + j5|^) 


SDmfip) > limsup 

SNR-^oo 


= - lim sup 

2 SNR-^oo 


\og{SNR) 

‘os - '“S (l + IfS) 


= - lim sup 1 

2 SNR-^oo 


\og{SNR) 

log (l + f^SNR^-P^ 
\og{SNR) 


{ p/ 2 , If 0 < p < 1 

1/2, Ifl<p 


(16) 


As an upper bound on G-SDoF, SDu{p) > SDmfip) holds. On the other hand, SDmfip) > 
SDu{p) is obtained from the equation above. Hence we can conclude that SDmfip) = SDuip) 
exactly. Thus, we have the following theorem. 

Theorem 2: The modulo-and-forward scheme achieves the full generalized secrecy degrees of 
freedom for the untrusted relay channel. 


D. Comparison with AF and DF Schemes 

This subsection compares the MF scheme with the AF scheme in terms of secrecy rate and 
the generalized secure degrees of freedom. 

1) Secrecy Rate Comparison with AF: For the AF scheme, the relay node will amplify the 
received signal in O with a coefficient r = ^/P 7 |TglP^+^ 2 P 7 +~^ before sending it to the 
destination H. As a result, the destination receives the signal 

y'd = Th 2 yr + rid 

= Thih 2 Xs + Th\xd +rh 2 nr + rid. (IV) 


^ The above analysis ignores the case that U > 0 and Rs < 0. In fact, it is easy to verify that 17 < 1/2 when Rs < 0. 
Therefore, this theorem is true for all channel realizations. 
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Fig. 2. Secrecy rate versus Pd, where Ps = '/Pd and = 1. 


Since the destination has full knowledge of Xd and the ehannel eoeffieients, it ean completely 
remove the self-interferenee term rh^Xd, and the resulting SNR of the target signal beeomes 

Phi92 


SNRaF ^2 p p^g^ ^ ^ 2 ] ' 

Then, we ean ealeulate the seereey rate of the traditional AF seheme as 


Raf - 


- log (l H- ^s9i92 - 

,2 + -Ps 5'2 + -fd5'2 + 0"^] 


\ 1 1 (^ \ Rs9i 


(18) 


(19) 


By eomparing Raf with Rg in (fT4l) . it is easy to verify that the seereey rate of the MF seheme, 
Rs, is always larger than that of the traditional AF seheme. Speeifieally, eonsider the ease in 
whieh —)■ 0, Prf —)■ oo, with Pd * and other parameters eonstant. Then Raf in (fT9l) is a 
eonstant while the rate Rg in (fT4l) inereases without bound. In other words, the improvement of 
the MF seheme over the AF seheme ean be arbitrarily large. 

In Fig. [2l we plot the aehievable seereey rate of the MF and AF sehemes, as well as the upper 
bound in (fTOl) versus transmission power P^. In partieular, we set gi = g 2 = I, Pg = y/Pd and 
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a = 1. The figure verifies that the rate of the MF scheme and the upper bound increase with 
the transmission power, and their gap is always less than 1/2. On the other hand, the rate of the 
AF scheme approaches a constant of 1/2. 

2) G-SDoF Comparison with AF: Since the rate gap between the MF and the AF schemes 
can be arbitrarily large in the high SNR region, their G-SDoF should be different. Here, we 
calculate the G-SDoF of the AF scheme to make a comparison. According to the definition in 
dH), we can calculate the G-SDoF of the AF scheme as follows: 

2 log (l + (72[P,gi+/432+A<?2+fT2]) “ 2 1°S (l + P^g2+a'2 ) 


SDaf{p) = limsup 

SNR-^oo 


= - lim sup 

2 SNR-^oo 


\og{SNR) 

log ^1 + S^RsNR{gi+g 2 )+]NRg 2 ) ~ 1°S (l + INRgl ) 


= - lim sup 

2 SNR-^oo 


\og{SNR) 

log (l + - log (l + iSNR^-^ 

\og{SNR) 


p/2, If 0 < p < 1 
= < 1 - p/2, If 1 < p < 2 . 


( 20 ) 


0, If 2 < p 

We plot the G-SDoF of AF and MF in Fig. [3] for an intuitive comparison. With reference 
to (fT9l) . its first term, | log (l + ^ 2 [p ^^^^^ 32 + 0 - 2 ] )» 1^ ^ decreasing function of Pd while the 
second term, — | log (l + pfgf/:^ 2 ), is an increasing function of Pd- Hence, the destination needs 
to carefully select an optimal value of Pd to maximize the rate Raf if all the channel information 
is also available at the destination (this is the interference power dilemma). In the high SNR 
regime, Pd is easier to calculate with reference to (l 20 l) . i.e., Pd and Pg should have the same 
order (p = 1 ). 

3) Comparison with DF: In the AF and MF schemes, only symbol level time synchronization 
is required at the multiple access phase. Currently, there is no capacity approaching DF scheme 
under this assumption. In this part, we compare the MF scheme with the lattice based DF scheme 
in GOll . where perfect phase, amplitude and time synchronization between the interfering signal 
and the source signal are assumed. 

With reference to lf20ll . setting hi = /i 2 , and Pg = Pd, the achievable rate of lattice DF scheme 
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Fig. 3. Generalized secure degrees of freedom versus p . 
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Rdf = - log 


Psgi 




- 1 . 


With the same ehannel eoeffieients, the MF seheme ean also aehieve a larger seeure rate 
even without sueh a strict synchronization requirement. The secrecy rate improvement can be 
calculated as 


Rs — Rdf — ■* 


V 


0 If t < 1 

ilog(l + i)-i Ifl<t<3/2 , 


( 21 ) 


where t = PgQi/a^ is the receiver side SNR. From (l2T]) . we can see that the gap will always 
be larger than 0 for the non-trivial case. For the low SNR region, the improvement of the MF 
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Fig. 4. Secure capacity versus SNR = Pagi/cr^ . 


scheme could be signifieant since Rg/Rdf can goes to infinitjo 

V. Outage Performance without CSIT 

In this seetion, we analyze the conneetion outage and secreey outage performance of the MF 
scheme under the assumption of only receiver side channel state information. Specifically, this 
section consists of four parts: Part A presents the formulation of conneetion and seereey outage 
probabilities, as well as the generalized secure diversity; Parts B and C calculate a lower bound 
and the achievable probability for the outage probabilities, as well as the secure diversity; and 
Part D provides a eomparison with the AF scheme. 

®The achievable rate in 1201 may be further improved with a better bounding technique. However, the MF scheme should 
outperform it at least in the low SNR region. 
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A. Outage Probabilities and Diversity 

The metrics of secrecy capacity and secrecy outage have been widely investigated to measure 
the performance of various schemes. However, they are not appropriate when the transmitter has 
no channel state information. In many cases, such as the fast fading case [|27]| . even the state 
information of the source-destination channel is difficult to obtain at the transmitter. Of course, 
with an untrusted channel state information provider, such as the relay in our system model, 
other issues arise. 

Without any CSIT, both the direct channel rate Rd and the secrecy rate Rs must be determined 
before transmission. Thus, there is always the possibility of unsuccessful transmissions. There 
are of two types of unsuccessful transmissions to consider: (1) secrecy outage, in which the 
eavesdropper obtains some information about the confidential message; and (2) connection 
outage, in which the destination fails to detect the mixed and confidential messages. We use 
the C-S outage (connection outage and secrecy outage) probability to measure the system secure 
performance |I71. We formulate the C-S performance as follows. 

1) Outage Probabilities Formulation: To discuss the outage probabilities, we define three 
events: (1) Ea- secrecy outage occurs at the relay and no connection outage occurs at the 
destination; (2) Eb'. connection outage occurs at the destination and no secrecy outage occurs 
at the relay; and (3) Ec'- both connection outage and secrecy outage occur. 

A connection outage event occurs when the receiver cannot correctly decode the received 
message. The connection outage probability can be written as 

Pc,out = Pr(^B u Ec) = Pr(C'd < Rd). (22) 

A secrecy outage event occurs when the eavesdropper can obtain some information about 
the confidential message. This event happens when the total information the eavesdropper can 
retrieve from the received message is more than the entropy of the random sequence. So, the 
secrecy outage probability can be written as 

Ps,out = ^^{Ea U Ec) = Pr(i?rf - Rs < Cr) = Pt{Rs > Rd - Cr). (23) 

Both Pc,out and Ps,out are of interest in this paper since the connection outage and secrecy 
outage may be of different severities in various scenarios. For a given Rg, there is a tradeoff 
between the connection outage probability and secrecy outage probability, since a large Rd will 
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decrease the secrecy outage probability while increasing the connection outage probability, and 
vice versa. 

2) Definition of G-SDG: In the high SNR region, diversity order is a simple metric to 
characterize the system performance. We now define the generalized secure diversity gain. Similar 
to the generalized diversity gain defined in [l28ll . the G-SDG is defined as 

~\ogpt{SNR,p) 


DG{p) = limsup 

SNR^oo 


(24) 


\og{SNR) 

where SNR = Ps/a'^, an exact expression for p = \og{INR)/ \og{SNR) are defined the same 
as for the G-SDoF in (|9l), and pt is the total outage probability pt = Ft{Ea) + Pt{Eb) + Pt{Ec). 


B. Bounds on Outage Probabilities and Diversity Orders 


This section develops a lower bound on the connection outage probability, an expression for 
the secrecy outage probability, and an upper bound on the G-SDG, for any possible processing 
at the relay node. 

1) Lower Bound on Connection Outage: With reference to the definition in (l22l) . a lower 
bound on the connection outage probability can be obtained when the direct channel capacity 
Cd is replaced with its upper bound 4 log(l -|- minj^fi, g 2 }Ps/cr‘^)- Then, we have a lower bound 
on the connection outage probability as 


Pr log(l + min{^i, g 2 }Ps/(T^) < Rd^ 

(25) 

Pr (min{5(i,5(2}Ps/cr^ <7o), 

(26) 


where 7 o 

plant as 


22Kd _ 1 

is the SNR threshold associated with connection outage. We further derive 


plant = 1 - Pr (min{^i,^2}P’./c^^ > 7o) 


= 1 - Pr Ui > 


7o^ 

P. 


Pr U2 > 


locr 


= 1 — e Ps 


(27) 

(28) 
(29) 


1 

where the last equation is obtained by noting the probability density functions fgj^{x) = 
and fgfix) = 
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2 ) Expression for the Secrecy Outage: The secrecy outage does not depend on the processing 
at the relay node. Therefore, we do not need to provide a bound, but rather can deal with the 
exact outage probability. With the secrecy outage probability definition in (|2^ . we derive an 
analytical expression for the secrecy outage probability as follows: 


Ps,out (fPr ^ Rd 

Ps9i 


= Pr 


> 7s , 


(30) 


~Pdg2 + 

where 7 ^ = — 1 is the secrecy outage SNR threshold. We further write Ps,out as 

Ps,out = Pr {Ps9i > 'lsPd92 + 7sCr^) 

p / ^ IsPd , 7scr^ 

= / fg2{92)( / ^ ^ f9i{9i)d9i)d92- 

^ _ ^ ^_ ^ 

Applying the probability density functions fgf^x) = j-e ^1 and fg^ix) = -^e =2 in the above 


(31) 


equation, we can obtain an analytical expression of Ps^out as follows: 


Ps,out ^ 

^2 


1 730-^ 

-Ps£l 




1 I 'Is Pd 


) 92 , 


Ps^l 

-e ^'>^ 1 . 


(32) 

PgEi + Pd£2'ys 

By applying the approximation = 1 + a; for small values of |a;| again, we arrive at an 
asymptotic expression for the secrecy outage probability with high transmit power Pg, namely 


PsEl 


Ps,out^-^ —(33) 

PsEl + PdE2ls ^ PsEl' 

3) Upper Bound on G-SDG: According to the definition, an outage event occurs when either 
a secrecy outage or a connection outage occurs. Therefore, we have a lower bound on the total 
outage probability: 




( 34 ) 
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With the generalized seeure diversity gain defined in (1241) . we ean then obtain an upper bound 
on the G-SDG as 

- \og{max[p^^ ^{SNR, p),ps,out{SNR, p)]) 


G-SDGup{p) = limsup 

SNR-^oo 

= lim sup ■ 

SNR-^oo 


= limsup 

SNR-^oo 


log{SNR) 

- max[\ogp^^^^^^{SNR, p), logPs,out{SNR, p)] 
log{SNR) 

min[- log((^ + ^)^), - log(;^^^ 5 ^(l - 5 ^))] 


= mm 


1, limsup 

SNR^oo 


log( 


log{SNR) 

SNRei ^ 


SNR£i+SNRP e2'rs 

log{SNR) 


0 If p < 1 
= < p —1 Ifl<p <2 
1 If p > 2 


(35) 

(36) 

(37) 

(38) 

(39) 


C. Achievable Outage Probabilities and Diversity 

In this seetion, we first derive the probabilities Pc^out and Ps,out aehievable with the MF seheme, 
separately. With these probabilities, we then obtain the aehievable generalized seeure diversity 
gain of the MF seheme. The aehievable Ps,out is the same as the expression in (l32l) . 

1) Achievable Connection Outage Probability: The aehievable eonneetion outage probability 
ean be written as 


Pc,out Pr((i7(i < Rd^ 

T 


= Pr 


1 (1 /o I 3 i 92 

logs ( 1/2 +—- 


< Rd 


12 V ' a'^ 91 + 92' 


(40) 

(41) 


= K,( 

Psy/^+2 ^Ps\/£G2'' 

where 71 = 70 — 1/2 and iTi(x) denotes the first-order modified Bessel funetion of the seeond 
kind, and the derivation from (l40l) to (|4TI) is given in Appendix I. 

By applying the approximation of Ki{x) ~ ^ and = 1 + 0 : for small values of |x|, we arrive 
at an asymptotie expression for the eonneetion outage probability with high transmit power Pg 
as 


1 1 

Pc,out — ( + I YO 

.El £2/ Ps 


\ 7^ 


( 42 ) 
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2) Tradeoff between Achievable Pc,out and Ps,out' With reference to (1^ and (ITO . we see that 
the two probabilities are not independent. An increase in Pc,out (Ps,out) will lead to a decrease in 
Ps,out (Pc,out), which is a tradeoff mentioned in Q- With the given tradeoff, it would be interesting 
to carefully design the rates Rg, Rd and the powers Pg, Pd to minimize the connection outage and 
secrecy outage probabilities. In the following Fig. [51 we plot the tradeoff between the connection 
outage and secrecy outage probabilities for a typical setting. 

In the high SNR regime with large Pg/cr'^, the tradeoff between the two probabilities is simpler. 
Substituting (021) into (l33l) . we obtain an explicit relation between Ps^out and Pc,out as 


PgSi + Pde2ls 1s£2 ^ 

Ps,out “T / \ Pc,out -L* 


(43) 


Ps£i ' 1i{£i + £2) 

3) Achievable G-SDG: In this section, we first give an upper bound and a lower bound on the 
total outage probability of the MF scheme. Fortunately, both bounds lead to the same G-SDG, 
which is also the best diversity gain in theory. 

Upper Bound and Lower Bound for Achievable pp. 

It is difficult to directly calculate the total outage probability due to the dependence between 
Pc,out and Pg^out- Therefore, we analyze an upper bound and lower bound on the total outage 
probability, with the MF scheme. According to the definition, we can obtain an upper bound: 


Pt = ^v{Ea) + Pt{Eb) + Pt{Ec) < Pt{Ea U Ec) + Pt{Eb U Eq) 
Pc,out T Ps,out E: 2 maX-(pc,onO PsjOnt• 


(44) 

(45) 


On the other hand, either secrecy outage or connection outage means the outage of the trans¬ 
mission. Therefore, we have a lower bound: 


Pt>m&x{pc,out,Ps,out}- (46) 

We can see that the lower bound is one-half of the upper bound. 

Achievable G-SDG: 

With the generalized secure diversity gain defined in (l24l) . the diversity gain is the same for 
both the upper bound and the lower bound on pt since they only differ by a constant coefficient. 
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and it can be calculated as follows: 

log(niax[pc,oMt p) 5 Ps,OUt iSNR,p)]) 


G-SDG{p) = limsup 

SNR-^oo 

= lim sup 

SNR^oo 


= limsup 

SNR^oo 


log{SNR) 

- max[\ogPc,out{SNR, p), \ogps,out{SNR, p)] 

\og{SNR) 

min[- log((^ + - log( 7 r-$fe-(l - s^))] 


= mm 


1, lim sup 

SNR-^oo 


-log( 


\og{SNR) 

SNRei ^ 


SNR6i+SNRPs2'ys 


\og{SNR) 


0 If p < 1 


= < p — 1 Ifl<p<2 


(47) 

(48) 

(49) 

(50) 

(51) 


1 If p > 2 

By comparing the upper bound on G-SDG in (l35l) and the achievable G-SDG in (1471) . we 
have the following theorem. 

Theorem 3: The modulo-and-forward scheme achieves the full generalized secrecy diversity 
gain for the untrusted relay channel. 


D. Comparison with AF Scheme 

This section compares the outage performance of the AF scheme with that of the MF scheme^ 
Since the secrecy outage probability is independent of the forwarding strategy at the relay, we 
need only to calculate the connection outage probability of the AF scheme, Pc,ouf From the 
received end-to-end SNR expression for the AF relaying, we can derive the connection outage 
probability as 


AF —T)y( 

Pc,out \ 


+ {Ps + Pd)g2 + 0"^] 
2 


< Ic 


(52) 


_ 7oct£ ( (Ps+Pd) I 1) 2'y, 

= X — ^ ®2/ —- 


I 1 f Ps + Pd 1 \ . / 27o(T^ 
P. \l S,S2\ Ps H Ps 


' Ps + Pd 1 

£+2 ^ Ps 7c 


( 53 ) 


where the derivation from (15^ to (15^ is provided in Appendix II. 


^The DF scheme is not compared since it cannot be adopted without CSIT. 
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Fig. 5. Outage probabilities with MF and AF forwarding. 

In Fig. [5l we plot the outage probability performanee of the AF seheme and the MF seheme, 
where we set Pg = Pd = 10, = £2 = = 1, /?* = 1/2, and Rd varies from 1/2 to 15. We 

ean see that there is a tradeoff between the eonneetion outage and seereey outage probabilities 
for both AF and MF sehemes. However, the eonneetion outage probability of the MF seheme is 
almost half that of the AF seheme with the same Rd, indieating that MF seheme is mueh more 
attraetive for data transmission. 

Seeondly, we ealeulate the outage diversity gain of the AF seheme. When the SNR goes to 
infinity, ^ ^^^o only when p < 2. In this ease, the asymptotie expression ean be 

written as 
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Similar to (1471) . we can calculate the outage diversity of the AF scheme as 


DGafip) = — limsup 


\og{max[p^^^^^{SNR, p),Ps,out{SNR, p)]) 


(54) 


SNR-^oo 


\og{SNR) 


min lim sup 

- SNR-^oo 



(55) 




0 If p < 1 


p-1 If 1 <p< 1.5 


= 


(56) 


2 - p If 1.5 < p < 2 


0 If p > 2 


Obviously, the maximum outage diversity of the AF scheme is 1/2, which is only half of that of 
the MF scheme. Moreover, this diversity of 1/2 is achieved only when p = 3/2, which requires 
very strict power control at the destination. These phenomena can be numerically observed in 
Fig. where a comparison of generalized secure diversity gain between the the AF and the MF 
schemes is plotted. 


VI. Conclusion 


In this paper, we have considered the untrusted relay channel. Inspired by the MLAN channel. 


we have proposed a modulo operation before forwarding at the relay, at which a lattice encoded 


confidential message from the source and Gaussian distributed artificial noise from the destination 
are superimposed. As a result, the artificial noise only helps to protect the confidential message 
from eavesdropping at the untrusted relay, with almost no detrimental effect of wasted relay 
power. For the case with full CSIT, we have shown that the proposed MF scheme approaches 
the secrecy capacity within 1/2 bit for any channel realization, hence achieving full generalized 
secure degrees of freedom. For the case without CIST, we have shown that the proposed MF 
scheme achieves the full generalized secure diversity gain of 1. On the other hand, the traditional 
AF scheme only achieves a G-SDG of 1/2 at most. 
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Fig. 6. Generalized secure diversity gain of AF and MF scheme versus p. 


Appendix A 
Derivation of Eq. (HU) 

From (|4^ . we can write the achievable connection outage probability as 

iPs 9192 


Pc,out Pf 


9i + 92 


< 7i 


where 71 = — 1/2 is the target SNR threshold. We can further write Po as 


Pc,out = Pr [9192 < -^ 9 i + -^ 92 J 


= Pr 


■ 71^2 71 

5 ' i ( 5'2 -< -^-92 


2 2 

Considering the two cases of 92 < and §2 > we can rewrite Pc,out as 


P,,», = Pr ( 9 , < ^) + P-- ( 9 . > ^.91 < 


(A.l) 


(A.2) 


(A.3) 
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1 _ _±_ 1 _ _±_ 

Applying the probability density funetions /gi(x) = Ag ei and fg^ix) = -^e =2 in the above 
equation, we ean obtain an analytieal expression for the outage probability as 


Pc,out = Pr (^2 < + 


/ffi(£/i)Pr (c/2 > 


= 1 - 


Psei(g2--^) 


TT- 92 


e2 Ja2=^ 


dg2 


= 1 

Psy /^ 1^2 '^ Psy /^ 1 ^ 2 ^ 


Thus, we have (|4TI) . 


(A.4) 

(A.5) 


Appendix B 
Derivation of Eq. 

From (l52l) . we ean write the eonneetion outage probability of AF relaying as 

Pc^ut = Pr < Ps(T^'iogi + {Ps + PdWiogi + io(y^) 

= Pr [{P‘^g2 - Ps(x‘^lo)gi < {Ps + Pd)(x‘^log2 + 7o0-^] • 


(B.l) 

(B.2) 


Considering the two eases of g 2 < and g 2 > separately, we ean further write p^out 


Pc^t = Pr (^2 < + Pr {g 2 > gi 


< 


7oCr^ _ {Ps + Pd)g2 + (y" 

Ps Psg2 - JoCr^ 


= 1 - 


1 92 7oO-^ iPs + Pd )92 + ^^ 


So I 

^ Ps 


g £2 ^sSi Ps92-'yoO-‘^ dg2- 


(B.3) 

(B.4) 


Using the variable substitution of x = 5^2 — we ean obtain a elosed-form expression for the 
eonneetion outage probability for the AF relaying as 


AF 7o<T^ ( (Ps+Pd) ) 1 I 27orT^ 

-1-e Ps V Psei + 62 ) 

yc^out -L p 


£i£2 ^ Ps lo' V Ps 


1 /p’s + -frf 1 

£i£2 ^ Ps lo 


(B.5) 


In this way, the proof of (15^ has been eompleted. 
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